Doctor Fish Agric Consult Ltd (“DFAC” or “we”) is committed to protecting the privacy and confidentiality of personal data we collect. We understand the importance of treating such information with care and using it strictly for its intended purposes, in accordance with applicable laws, including the Nigeria Data Protection Regulation (NDPR). This Privacy Policy outlines the personal data we gather, how we process it, your rights under the NDPR, and how you can exercise those rights.




Consent
By providing your personal data to us, you consent to our Privacy Policy and agree that we may collect, use, and disclose your personal information for the specified purposes described in this policy.



Data Controller Contact Information
Doctor Fish Agric Consult is the Data Controller responsible for handling your personal data. For any questions or concerns about this policy, or to address any queries or complaints about our data processing, please contact our Data Protection Officer at: Doctor Fish Agric Consult Ltd No 6, Ovo Odjoji Close, Off Dietake Street, Ughelli, Delta State – Nigeria Tel: +234 802 211 3504 Email: info@doctorfish.com.ng



Personal Data We Process
Personal data refers to any information that can identify you. We may collect and process the following types of personal data:

Beneficiaries/Partners: Name, phone number, age, email address, home address, date of birth, Bank Verification Number (BVN), account details, identification documents (e.g., driver’s license, passport, national ID card, voter’s card).
Contractors: Name, phone number, email address, home address, date of birth, state of origin, signature.
Vendors: Contact name, phone number, email address, office address.
Usage Data: Information about your interaction with our website, such as pages visited, time and date of visit.



Purpose of collecting personal data:
We collect your personal data for the following purposes:

Based on Consent: To establish and maintain relationships with our grantees, beneficiaries, partners, contractors, and vendors.
Compliance with Legal Obligations: To fulfill statutory and regulatory obligations, such as anti-money laundering and law enforcement requests.
Legitimate Interests: To manage relationships, respond to inquiries, conduct statistical analyses, ensure security, prevent fraud, and market our products and services.



Data Collection Methods:
We may collect personal data through:
Direct Sources: Attendance forms, beneficiary consent forms, emails, social media sites, our website, telephone, vendor questionnaires, contractor consent forms, visitors register, CCTV cameras.
Third-Party Sources: Authorized individuals, HR outsour cing firms, financial institutions, publicly available sources, government agencies.



Use of Cookies
Our website uses cookies to enhance your online experience. Cookies can be disabled in your browser settings, but doing so may affect the functionality of our website.



Record Retention Period
We retain your personal data for a minimum of five years after your relationship with us ends, in compliance with the Money Laundering (Prohibition) Act, 2011 (As Amended). We may retain data longer if necessary for legitimate interests or legal compliance.



Sharing Your Personal Data:
We may share your personal data with third parties, such as service providers, professional advisors, financial institutions, regulators, law enforcement agencies, courts, and public authorities, in line with legal requirements and the NDPR.



Transferring Your Data to other Countries:
Your personal data may be transferred to countries outside Nigeria. We ensure that any third parties we use in these countries provide the same level of data protection as required by the NDPR.



Your Rights:
Under the NDPR, you have the following rights:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data under certain conditions.
Object: Object to processing based on legitimate interests or public interest.
Restrict: Request restriction of processing under certain conditions.
Portability: Request transfer of your data to another party in electronic format.
Automated Decisions: Object to decisions based solely on automated processing.

To exercise any of these rights, contact our Data Protection Officer at the address provided in Section 2.



Data Protection Measures:
We implement physical and electronic security measures to protect your personal data from unauthorized access, loss, or destruction. We will inform you of any breaches that may pose a threat to your data.



Remedies for policy violations:
In case of a privacy policy violation, our Data Protection Officer will address it within seven days. If personal data is disclosed without consent, it will be retracted immediately, and you will be informed within 48 hours.



Changes to this Privacy Policy:
We may update this Privacy Policy periodically to reflect changes in the NDPR or our operations. Significant updates will be communicated via email. For any questions or concerns about this Privacy Policy, please contact us at the details provided in Section 2.